Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands.
References
Configurations
History
21 Nov 2024, 08:23
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | () https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities - Vendor Advisory |
06 Oct 2023, 17:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities - Vendor Advisory | |
| First Time |
Dell smartfabric Storage Software
Dell |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CPE | cpe:2.3:a:dell:smartfabric_storage_software:*:*:*:*:*:*:*:* |
05 Oct 2023, 19:13
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-05 18:15
Updated : 2024-11-21 08:23
NVD link : CVE-2023-43068
Mitre link : CVE-2023-43068
CVE.ORG link : CVE-2023-43068
JSON object : View
Products Affected
dell
- smartfabric_storage_software
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')